pathtrace.c revision fcda7a5f4fcfbedb5493bbfc1b37e53c6b3a575c
18a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards/* 28a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * Copyright (c) 2011, Comtrol Corp. 38a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * All rights reserved. 48a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * 58a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * Redistribution and use in source and binary forms, with or without 68a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * modification, are permitted provided that the following conditions 78a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * are met: 88a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * 1. Redistributions of source code must retain the above copyright 98a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * notice, this list of conditions and the following disclaimer. 108a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * 2. Redistributions in binary form must reproduce the above copyright 118a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * notice, this list of conditions and the following disclaimer in the 128a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * documentation and/or other materials provided with the distribution. 138a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * 3. The name of the author may not be used to endorse or promote products 148a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * derived from this software without specific prior written permission. 158a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * 168a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 178a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 188a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 198a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 208a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 218a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 228a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 238a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 248a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 258a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 268a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * 278a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards */ 288a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 298a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#include "defs.h" 308a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 318a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#include <ctype.h> 328a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#include <limits.h> 338a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 348a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#ifdef HAVE_POLL_H 358a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#include <poll.h> 368a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#endif 378a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#ifdef HAVE_SYS_POLL_H 388a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#include <sys/poll.h> 398a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#endif 408a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 418a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#include "syscall.h" 428a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 438a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#define MAXSELECTED 256 /* max number of "selected" paths */ 448a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwardsstatic const char *selected[MAXSELECTED]; /* paths selected for tracing */ 458a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 468a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards/* 478a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * Return true if specified path matches one that we're tracing. 488a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards */ 498a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwardsstatic int 508a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwardspathmatch(const char *path) 518a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards{ 52fcda7a5f4fcfbedb5493bbfc1b37e53c6b3a575cDmitry V. Levin unsigned int i; 538a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 54fcda7a5f4fcfbedb5493bbfc1b37e53c6b3a575cDmitry V. Levin for (i = 0; i < ARRAY_SIZE(selected); ++i) 558a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 568a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (selected[i] == NULL) 578a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 0; 588a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (!strcmp(path, selected[i])) 598a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 1; 608a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 618a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 0; 628a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards} 638a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 648a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards/* 658a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * Return true if specified path (in user-space) matches. 668a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards */ 678a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwardsstatic int 688a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwardsupathmatch(struct tcb *tcp, unsigned long upath) 698a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards{ 708a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards char path[PATH_MAX + 1]; 718a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 728a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return umovestr(tcp, upath, sizeof path, path) == 0 && 738a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards pathmatch(path); 748a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards} 758a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 768a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards/* 778a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * Return true if specified fd maps to a path we're tracing. 788a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards */ 798a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwardsstatic int 808a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwardsfdmatch(struct tcb *tcp, int fd) 818a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards{ 828a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards const char *path = getfdpath(tcp, fd); 838a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 848a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return path && pathmatch(path); 858a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards} 868a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 878a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards/* 888a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * Add a path to the set we're tracing. 898a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * Secifying NULL will delete all paths. 908a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards */ 918a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwardsstatic int 928a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwardsstorepath(const char *path) 938a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards{ 94fcda7a5f4fcfbedb5493bbfc1b37e53c6b3a575cDmitry V. Levin unsigned int i; 958a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 968a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (path == NULL) 978a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 98fcda7a5f4fcfbedb5493bbfc1b37e53c6b3a575cDmitry V. Levin for (i = 0; i < ARRAY_SIZE(selected); ++i) 998a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (selected[i]) 1008a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 1018a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards free((char *) selected[i]); 1028a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards selected[i] = NULL; 1038a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 1048a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 0; 1058a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 1068a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 107fcda7a5f4fcfbedb5493bbfc1b37e53c6b3a575cDmitry V. Levin for (i = 0; i < ARRAY_SIZE(selected); ++i) 1088a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (!selected[i]) 1098a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 1108a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards selected[i] = path; 1118a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 0; 1128a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 1138a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 114fcda7a5f4fcfbedb5493bbfc1b37e53c6b3a575cDmitry V. Levin fprintf(stderr, "Max trace paths exceeded, only using first %u\n", 115fcda7a5f4fcfbedb5493bbfc1b37e53c6b3a575cDmitry V. Levin (unsigned int) ARRAY_SIZE(selected)); 1168a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return -1; 1178a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards} 1188a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 1198a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards/* 1208a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * Get path associated with fd. 1218a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards */ 1228a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwardsconst char *getfdpath(struct tcb *tcp, int fd) 1238a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards{ 1248a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#ifdef LINUX 1258a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards static char path[PATH_MAX+1]; 1268a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards char linkpath[64]; 1278a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards ssize_t n; 1288a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 1298a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (fd < 0) 1308a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return NULL; 1318a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 1328a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards snprintf(linkpath, sizeof linkpath, "/proc/%d/fd/%d", tcp->pid, fd); 1338a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards n = readlink(linkpath, path, (sizeof path) - 1); 1348a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (n <= 0) 1358a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return NULL; 1368a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards path[n] = '\0'; 1378a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return path; 1388a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#else 1398a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return NULL; 1408a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#endif 1418a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards} 1428a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 1438a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards/* 1448a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * Add a path to the set we're tracing. Also add the canonicalized 1458a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * version of the path. Secifying NULL will delete all paths. 1468a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards */ 1478a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwardsint 1488a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwardspathtrace_select(const char *path) 1498a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards{ 1508a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards char *rpath; 1518a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 1528a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (path == NULL) 1538a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return storepath(path); 1548a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 1558a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (storepath(path)) 1568a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return -1; 1578a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 1588a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards rpath = realpath(path, NULL); 1598a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 1608a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (rpath == NULL) 1618a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 0; 1628a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 1638a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards /* if realpath and specified path are same, we're done */ 1648a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (!strcmp(path, rpath)) 1658a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 1668a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards free(rpath); 1678a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 0; 1688a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 1698a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 1708a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards fprintf(stderr, "Requested path '%s' resolved into '%s'\n", 1718a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards path, rpath); 1728a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return storepath(rpath); 1738a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards} 1748a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 1758a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards/* 1768a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * Return true if syscall accesses a selected path 1778a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * (or if no paths have been specified for tracing). 1788a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards */ 1798a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwardsint 1808a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwardspathtrace_match(struct tcb *tcp) 1818a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards{ 1828a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards const struct sysent *s; 1838a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 1848a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (selected[0] == NULL) 1858a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 1; 1868a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 1878a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s = &sysent[tcp->scno]; 1888a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 1898a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (!(s->sys_flags & (TRACE_FILE | TRACE_DESC))) 1908a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 0; 1918a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 1928a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards /* 1938a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * Check for special cases where we need to do something 1948a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * other than test arg[0]. 1958a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards */ 1968a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 1978a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#ifdef LINUX 1988a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 1998a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (s->sys_func == sys_dup2 || 2008a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_dup3 || 2018a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_sendfile || 2028a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_sendfile64 || 203b63256e69bf3f1a74aadb0e14556490bc8f4ef95Denys Vlasenko !strcmp(s->sys_name, "tee")) 2048a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 2058a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards /* fd, fd */ 2068a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return fdmatch(tcp, tcp->u_arg[0]) || 2078a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards fdmatch(tcp, tcp->u_arg[1]); 2088a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 2098a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 2108a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (s->sys_func == sys_inotify_add_watch || 2118a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_faccessat || 2128a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_fchmodat || 2138a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_futimesat || 2148a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_mkdirat || 2158a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_unlinkat || 2168a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_newfstatat || 2178a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_mknodat || 2188a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_openat || 2198a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_readlinkat || 2208a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_utimensat || 2218a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_fchownat || 222b63256e69bf3f1a74aadb0e14556490bc8f4ef95Denys Vlasenko s->sys_func == sys_pipe2) 2238a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 2248a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards /* fd, path */ 2258a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return fdmatch(tcp, tcp->u_arg[0]) || 2268a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards upathmatch(tcp, tcp->u_arg[1]); 2278a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 2288a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 2298a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (s->sys_func == sys_link || 2308a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_pivotroot || 2318a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_rename || 2328a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_symlink || 233b63256e69bf3f1a74aadb0e14556490bc8f4ef95Denys Vlasenko s->sys_func == sys_mount) 2348a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 2358a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards /* path, path */ 2368a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return upathmatch(tcp, tcp->u_arg[0]) || 2378a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards upathmatch(tcp, tcp->u_arg[1]); 2388a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 2398a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 2408a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (s->sys_func == sys_renameat || 241b63256e69bf3f1a74aadb0e14556490bc8f4ef95Denys Vlasenko s->sys_func == sys_linkat) 2428a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 2438a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards /* fd, path, fd, path */ 2448a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return fdmatch(tcp, tcp->u_arg[0]) || 2458a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards fdmatch(tcp, tcp->u_arg[2]) || 2468a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards upathmatch(tcp, tcp->u_arg[1]) || 2478a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards upathmatch(tcp, tcp->u_arg[3]); 2488a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 2498a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 2508a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (s->sys_func == sys_old_mmap || s->sys_func == sys_mmap) 2518a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 2528a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards /* x, x, x, x, fd */ 2538a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return fdmatch(tcp, tcp->u_arg[4]); 2548a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 2558a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 2568a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (s->sys_func == sys_symlinkat) 2578a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 2588a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards /* path, fd, path */ 2598a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return fdmatch(tcp, tcp->u_arg[1]) || 2608a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards upathmatch(tcp, tcp->u_arg[0]) || 261b63256e69bf3f1a74aadb0e14556490bc8f4ef95Denys Vlasenko upathmatch(tcp, tcp->u_arg[2]); 2628a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 2638a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 2648a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (!strcmp(s->sys_name, "splice")) 2658a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 2668a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards /* fd, x, fd, x, x */ 2678a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return fdmatch(tcp, tcp->u_arg[0]) || 2688a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards fdmatch(tcp, tcp->u_arg[2]); 2698a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 2708a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 2718a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (s->sys_func == sys_epoll_ctl) 2728a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 2738a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards /* x, x, fd, x */ 2748a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return fdmatch(tcp, tcp->u_arg[2]); 2758a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 2768a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 2778a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (s->sys_func == sys_select || 2788a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_oldselect || 279b63256e69bf3f1a74aadb0e14556490bc8f4ef95Denys Vlasenko s->sys_func == sys_pselect6) 2808a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 2818a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards int i, j, nfds; 2828a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards long *args, oldargs[5]; 2838a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards unsigned fdsize; 2848a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards fd_set *fds; 2858a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 2868a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (s->sys_func == sys_oldselect) 2878a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 2888a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (umoven(tcp, tcp->u_arg[0], sizeof oldargs, 2898a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards (char*) oldargs) < 0) 2908a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 2918a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards fprintf(stderr, "umoven() failed\n"); 2928a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 0; 2938a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 2948a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards args = oldargs; 2958a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } else 2968a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards args = tcp->u_arg; 2978a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 2988a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards nfds = args[0]; 2998a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards fdsize = ((((nfds + 7) / 8) + sizeof(long) - 1) 3008a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards & -sizeof(long)); 3018a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards fds = malloc(fdsize); 3028a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 3038a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (fds == NULL) 3048a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 3058a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards fprintf(stderr, "out of memory\n"); 3068a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 0; 3078a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 3088a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 3098a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards for (i = 1; i <= 3; ++i) 3108a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 3118a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (args[i] == 0) 3128a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards continue; 3138a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 3148a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (umoven(tcp, args[i], fdsize, (char *) fds) < 0) 3158a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 3168a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards fprintf(stderr, "umoven() failed\n"); 3178a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards continue; 3188a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 3198a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 3208a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards for (j = 0; j < nfds; ++j) 3218a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (FD_ISSET(j, fds) && fdmatch(tcp, j)) 3228a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 3238a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards free(fds); 3248a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 1; 3258a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 3268a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 3278a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards free(fds); 3288a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 0; 3298a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 3308a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 3318a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (s->sys_func == sys_poll || 332b63256e69bf3f1a74aadb0e14556490bc8f4ef95Denys Vlasenko s->sys_func == sys_ppoll) 3338a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 3348a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards struct pollfd fds; 3358a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards unsigned nfds; 3368a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards unsigned long start, cur, end; 3378a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 3388a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards start = tcp->u_arg[0]; 3398a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards nfds = tcp->u_arg[1]; 3408a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 3418a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards end = start + sizeof(fds) * nfds; 3428a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 3438a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (nfds == 0 || end < start) 3448a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 0; 3458a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 3468a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards for (cur = start; cur < end; cur += sizeof(fds)) 3478a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if ((umoven(tcp, cur, sizeof fds, (char *) &fds) == 0) 3488a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards && fdmatch(tcp, fds.fd)) 3498a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 1; 3508a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 3518a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 0; 3528a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 3538a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 3548a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (s->sys_func == printargs || 3558a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_pipe || 3568a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_pipe2 || 3578a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_eventfd2 || 3588a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_eventfd || 3598a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_inotify_init1 || 3608a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_timerfd_create || 3618a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_timerfd_settime || 3628a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_timerfd_gettime || 3638a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards s->sys_func == sys_epoll_create || 3648a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards !strcmp(s->sys_name, "fanotify_init")) 3658a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards { 3668a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards /* 3678a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * These have TRACE_FILE or TRACE_DESCRIPTOR set, but they 3688a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * don't have any file descriptor or path args to test. 3698a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards */ 3708a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 0; 3718a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards } 3728a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#else 3738a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#warning "path tracing only using arg[0]" 3748a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards#endif 3758a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 3768a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards /* 3778a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * Our fallback position for calls that haven't already 3788a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards * been handled is to just check arg[0]. 3798a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards */ 3808a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 3818a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (s->sys_flags & TRACE_FILE) 3828a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return upathmatch(tcp, tcp->u_arg[0]); 3838a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 3848a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards if (s->sys_flags & TRACE_DESC) 3858a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return fdmatch(tcp, tcp->u_arg[0]); 3868a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards 3878a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards return 0; 3888a08277d13d0378c2ff3ce851534c3bf7e31defaGrant Edwards} 389